Privacy Notice for job applicants

Date of last update: 9 July 2026

Pursuant to Article 13 of EU Regulation 2016/679, we inform you of the following:

  1. Data Controller.

    The Data Controller is M4SS S.r.l., with registered office in Reggio Emilia, via dello Statuto n. 1/A, tax code and VAT number: 02772290355, e-mail: privacy@m4ss.net, which has appointed its own Data Protection Officer (DPO), who can be contacted at the registered office of M4SS S.r.l. and at the following e-mail address: dpo@m4ss.net.

  2. Purposes and legal basis of data processing.

    Processing is aimed at:

    1. verifying the requirements for hiring, establishing an employment relationship or a collaborative working relationship with M4SS S.r.l.; the legal basis is the necessity to perform a contract to which you are a party or to carry out pre-contractual measures adopted at your request;

    2. fulfilling obligations provided by law, by a regulation, by Community legislation or by an order of the Authority; the legal basis is the fulfilment of a legal obligation to which the Data Controller is subject;

    3. defending a right in legal proceedings; the legal basis is the pursuit of the Data Controller's legitimate interest.

  3. Categories and sources of data processed.

    The data processed may be personal identification data (name and surname), registry data (place and date of birth, residence), tax identification data (tax code), curriculum vitae and any personal data necessary to pursue the aforementioned purposes. Such data are provided directly by you, or by employment centres, temporary employment agencies or personnel search and selection agencies.

  4. Methods of data processing.

    Processing is carried out, using methods strictly necessary to meet the purposes indicated above, by means of some of the operations or the set of operations referred to in Article 4, no. 2) of EU Regulation 2016/679: collection, recording, organisation, structuring, storage, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. The operations may be carried out with or without the aid of electronic, telematic or otherwise automated tools. The personal data are not subject to any fully automated decision-making process, including profiling.

  5. Provision of data.

    The provision of personal data is optional, but any refusal to provide it in whole or in part may make it impossible for M4SS S.r.l. to verify the requirements for hiring, establishing an employment relationship or a collaborative working relationship.
    In any case, by communicating your personal data for any of the purposes referred to in point 2, M4SS S.r.l. may process such data to fulfil legal obligations and to pursue its legitimate interest in protecting a right in legal proceedings.

  6. Data retention.

    Personal data will be processed and retained for the entire period necessary for the complete verification of the requirements for hiring, establishing an employment relationship or a collaborative working relationship, as well as for the correct fulfilment of legal obligations, and for the duration necessary for the defence of a right in legal proceedings or before judicial authorities.

  7. Communication of data.

    Personal data may be communicated to, or become known to, for the purposes referred to in point 2:

    1. internal personnel of M4SS S.r.l., specifically authorised to process data and assigned to personnel management and related payroll, to administration, and to the management and control of the corporate IT infrastructure;

    2. data processors and their further processors and authorised parties, such as, by way of example and not exhaustively: accountants, labour consultant, IT service providers or their support providers, and the relevant appointed technical staff, any collaborators, persons in charge of occasional maintenance operations, all adequately trained in confidentiality protection;

    3. board of statutory auditors, legal auditors, supervisory body;

    4. any temporary employment agency or personnel search and selection agency;

    5. employment centres;

    6. public bodies, judicial or administrative authorities, for the fulfilment of legal obligations;

    7. other parties processing the data in fulfilment of specific legal obligations.

  8. Transfer of data abroad.

    Personal data will not be transferred outside the European Union and the European Economic Area.

  9. Rights of the data subject.

    Pursuant to Articles 15-18 and 20-21 of EU Regulation 2016/679, you have the right to obtain:

    1. confirmation as to whether or not personal data concerning you exist, even if not yet registered, and their communication in intelligible form;

    2. the indication of:
      - the origin of the personal data;
      - the purposes and methods of processing;
      - the logic applied in case of processing carried out with the aid of electronic tools;
      - the identifying details of the Controller and of any processors;
      - the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as processors or appointees;

    3. updating, rectification or, where you have an interest therein, the integration of the data;

    4. the erasure, anonymisation or blocking of data processed in breach of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

    5. confirmation that the operations referred to in letters c) and d) have been brought to the attention, also as regards their content, of those to whom the data were communicated or disseminated, except where such fulfilment proves impossible or involves a manifestly disproportionate effort compared to the right protected.

    The data subject has the right to object, in whole or in part:

    1. for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of collection;

    2. to the processing of personal data concerning you for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication.

    You have the right to data portability, i.e. to receive, in a structured, commonly used and machine-readable format, the personal data concerning you and you have the right to transmit such data to another Data Controller without impediment. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la Protezione dei dati personali, the Italian Data Protection Authority: www.garanteprivacy.it).
    You may exercise your rights by means of a written request, sent to the Controller, at the contact details indicated in point 1.